opensips简介

概述

在众多的sip服务器中，主要有俩大类，一类侧重于媒体/业务服务器，比如freeswitch/asterisk，另一类侧重于代理/负载服务器，比如opensips/kamailio。

今天我们对opensips做一个简单介绍。

OpenSIPS 是用于语音、视频、IM、在线状态和任何其他SIP扩展的开源 SIP 代理服务器。

OpenSIPS 是一种多功能、多用途的SIP信令服务器，运营商、电信或 ITSP 将其用于 Class4/5平台、中继、企业/虚拟 PBX 解决方案、会话边界控制器、应用服务器、前端负载等解决方案、IMS 平台、呼叫中心等等。

OpenSIPS 被推荐用于任何类型的 SIP 场景/服务：

1. 高吞吐量 - 数万CPS，数百万个在线呼叫（参见官方测试）
2. 路由和集成的灵活性 - 用于实现自定义路由逻辑的路由脚本，多个接口 API（参见手册）
3. 有效的应用程序构建 - 超过 120 个模块提供功能，用于 SIP 处理、后端操作、集成、路由逻辑（请参阅模块列表）

本章节主要介绍opensips的编译安装、配置启动的通用流程。

开发环境

Centos：CentOS release 6 (Final)或以上版本

opensips：2.4.9

GCC/C++：4.4.7

编译安装

依赖库

yum install -y autoconf automake libtool gcc-c++ ncurses-devel make zlib-devel lynx flex bison mysql pcre python-devel openssl-devel mysql-devel

安装hiredis

git clone https://github.com/redis/hiredis.git hiredis

cd hiredis

make install

源码安装包：

https://opensips.org/pub/opensips/2.4.9/opensips-2.4.9.tar.gz

wget  https://opensips.org/pub/opensips/2.4.9/opensips-2.4.9.tar.gz

tar –zxvf opensips-2.4.9.tar.gz

编译安装：

方法1：

cd  opensips-2.4.9

make include_modules="cachedb_redis db_mysql dialplan python tls_mgm proto_tls proto_ws proto_wss " prefix="/usr/local/opensips" install

方法2：

cd  opensips-2.4.9

make menuconfig

增加 cachedb_redis db_mysql dialplan python tls_mgm proto_tls proto_ws proto_wss 模块编译

修改安装目录为 /usr/local/opensips

保存退出menuconfig

make install

目录结构

默认安装路径为 /usr/local/opensips

编译安装完成后，检查安装目录

opensips

├── etc

│   └── opensips

│       ├── opensips.cfg

│       ├── opensipsctlrc

│       ├── osipsconsolerc

│       ├── scenario_callcenter.xml

│       └── tls

│           ├── ca.conf

│           ├── README

│           ├── request.conf

│           ├── rootCA

│           │   ├── cacert.pem

│           │   ├── certs

│           │   │   └── 01.pem

│           │   ├── index.txt

│           │   ├── private

│           │   │   └── cakey.pem

│           │   └── serial

│           ├── user

│           │   ├── user-calist.pem

│           │   ├── user-cert.pem

│           │   ├── user-cert_req.pem

│           │   └── user-privkey.pem

│           └── user.conf

├── lib64

│   └── opensips

│       ├── modules

│       │   ├── acc.so

│       │   ├── alias_db.so

│       │   ├── auth_aaa.so

│       │   ├── auth_db.so

│       │   ├── auth.so

│       │   ├── avpops.so

│       │   ├── b2b_entities.so

│       │   ├── b2b_sca.so

│       │   ├── benchmark.so

│       │   ├── cachedb_local.so

│       │   ├── cachedb_redis.so

│       │   ├── cachedb_sql.so

│       │   ├── call_center.so

│       │   ├── call_control.so

│       │   ├── cfgutils.so

│       │   ├── clusterer.so

│       │   ├── db_cachedb.so

│       │   ├── db_flatstore.so

│       │   ├── db_mysql.so

│       │   ├── db_text.so

│       │   ├── db_virtual.so

│       │   ├── dialog.so

│       │   ├── dialplan.so

│       │   ├── dispatcher.so

│       │   ├── diversion.so

│       │   ├── dns_cache.so

│       │   ├── domainpolicy.so

│       │   ├── domain.so

│       │   ├── drouting.so

│       │   ├── enum.so

│       │   ├── event_datagram.so

│       │   ├── event_flatstore.so

│       │   ├── event_jsonrpc.so

│       │   ├── event_route.so

│       │   ├── event_routing.so

│       │   ├── event_virtual.so

│       │   ├── event_xmlrpc.so

│       │   ├── exec.so

│       │   ├── fraud_detection.so

│       │   ├── freeswitch_scripting.so

│       │   ├── freeswitch.so

│       │   ├── gflags.so

│       │   ├── group.so

│       │   ├── imc.so

│       │   ├── jsonrpc.so

│       │   ├── load_balancer.so

│       │   ├── mangler.so

│       │   ├── mathops.so

│       │   ├── maxfwd.so

│       │   ├── mediaproxy.so

│       │   ├── mi_datagram.so

│       │   ├── mid_registrar.so

│       │   ├── mi_fifo.so

│       │   ├── mi_http.so

│       │   ├── mi_json.so

│       │   ├── msilo.so

│       │   ├── nathelper.so

│       │   ├── nat_traversal.so

│       │   ├── options.so

│       │   ├── path.so

│       │   ├── peering.so

│       │   ├── permissions.so

│       │   ├── pike.so

│       │   ├── presence_callinfo.so

│       │   ├── presence_xcapdiff.so

│       │   ├── proto_bin.so

│       │   ├── proto_hep.so

│       │   ├── proto_ws.so

│       │   ├── python.so

│       │   ├── qos.so

│       │   ├── ratelimit.so

│       │   ├── registrar.so

│       │   ├── rr.so

│       │   ├── rtpengine.so

│       │   ├── rtpproxy.so

│       │   ├── script_helper.so

│       │   ├── seas.so

│       │   ├── signaling.so

│       │   ├── sipcapture.so

│       │   ├── sip_i.so

│       │   ├── sipmsgops.so

│       │   ├── siptrace.so

│       │   ├── sl.so

│       │   ├── sms.so

│       │   ├── speeddial.so

│       │   ├── sql_cacher.so

│       │   ├── sst.so

│       │   ├── statistics.so

│       │   ├── stun.so

│       │   ├── textops.so

│       │   ├── tls_mgm.so

│       │   ├── tm.so

│       │   ├── topology_hiding.so

│       │   ├── uac_auth.so

│       │   ├── uac_redirect.so

│       │   ├── uac_registrant.so

│       │   ├── uac.so

│       │   ├── uri.so

│       │   ├── userblacklist.so

│       │   └── usrloc.so

│       └── opensipsctl

│           ├── dbtextdb

│           │   └── dbtextdb.py

│           ├── opensipsctl.base

│           ├── opensipsctl.ctlbase

│           ├── opensipsctl.dbtext

│           ├── opensipsctl.fifo

│           ├── opensipsctl.mysql

│           ├── opensipsctl.sqlbase

│           ├── opensipsctl.unixsock

│           ├── opensipsdbctl.base

│           ├── opensipsdbctl.dbtext

│           └── opensipsdbctl.mysql

├── sbin

│   ├── opensips

│   ├── opensipsctl

│   ├── opensipsdbctl

│   ├── opensipsunix

│   ├── osipsconfig

│   └── osipsconsole

└── share

├── doc

│   └── opensips

│       ├── AUTHORS

│       ├── INSTALL

│       ├── NEWS

│       ├── README

│       ├── README.acc

│       ├── README.alias_db

│       ├── README.auth

│       ├── README.auth_aaa

│       ├── README.auth_db

│       ├── README.avpops

│       ├── README.b2b_entities

│       ├── README.b2b_sca

│       ├── README.benchmark

│       ├── README.cachedb_local

│       ├── README.cachedb_redis

│       ├── README.cachedb_sql

│       ├── README.call_center

│       ├── README.call_control

│       ├── README.cfgutils

│       ├── README.clusterer

│       ├── README.db_cachedb

│       ├── README.db_flatstore

│       ├── README.db_mysql

│       ├── README.db_text

│       ├── README.db_virtual

│       ├── README.dialog

│       ├── README.dialplan

│       ├── README.dispatcher

│       ├── README.diversion

│       ├── README.dns_cache

│       ├── README.domain

│       ├── README.domainpolicy

│       ├── README.drouting

│       ├── README.enum

│       ├── README.event_datagram

│       ├── README.event_flatstore

│       ├── README.event_jsonrpc

│       ├── README.event_route

│       ├── README.event_routing

│       ├── README.event_virtual

│       ├── README.event_xmlrpc

│       ├── README.exec

│       ├── README.fraud_detection

│       ├── README.freeswitch

│       ├── README.freeswitch_scripting

│       ├── README.gflags

│       ├── README.group

│       ├── README.imc

│       ├── README.jsonrpc

│       ├── README.load_balancer

│       ├── README.mangler

│       ├── README.mathops

│       ├── README.maxfwd

│       ├── README.mediaproxy

│       ├── README.mi_datagram

│       ├── README.mid_registrar

│       ├── README.mi_fifo

│       ├── README.mi_http

│       ├── README.mi_json

│       ├── README-MODULES

│       ├── README.msilo

│       ├── README.nathelper

│       ├── README.nat_traversal

│       ├── README.options

│       ├── README.path

│       ├── README.peering

│       ├── README.permissions

│       ├── README.pike

│       ├── README.presence_callinfo

│       ├── README.presence_xcapdiff

│       ├── README.proto_bin

│       ├── README.proto_hep

│       ├── README.proto_ws

│       ├── README.python

│       ├── README.qos

│       ├── README.ratelimit

│       ├── README.registrar

│       ├── README.rr

│       ├── README.rtpengine

│       ├── README.rtpproxy

│       ├── README.script_helper

│       ├── README.seas

│       ├── README.signaling

│       ├── README.sipcapture

│       ├── README.sip_i

│       ├── README.sipmsgops

│       ├── README.siptrace

│       ├── README.sl

│       ├── README.sms

│       ├── README.speeddial

│       ├── README.sql_cacher

│       ├── README.sst

│       ├── README.statistics

│       ├── README.stun

│       ├── README.textops

│       ├── README.tls_mgm

│       ├── README.tm

│       ├── README.topology_hiding

│       ├── README.uac

│       ├── README.uac_auth

│       ├── README.uac_redirect

│       ├── README.uac_registrant

│       ├── README.uri

│       ├── README.userblacklist

│       └── README.usrloc

├── man

│   ├── man5

│   │   └── opensips.cfg.5

│   └── man8

│       ├── opensips.8

│       ├── opensipsctl.8

│       └── opensipsunix.8

└── opensips

├── dbtext

│   └── opensips

│       ├── acc

│       ├── active_watchers

│       ├── address

│       ├── aliases

│       ├── b2b_entities

│       ├── b2b_logic

│       ├── b2b_sca

│       ├── cachedb

│       ├── carrierfailureroute

│       ├── carrierroute

│       ├── cc_agents

│       ├── cc_calls

│       ├── cc_cdrs

│       ├── cc_flows

│       ├── closeddial

│       ├── clusterer

│       ├── cpl

│       ├── dbaliases

│       ├── dialog

│       ├── dialplan

│       ├── dispatcher

│       ├── domain

│       ├── domainpolicy

│       ├── dr_carriers

│       ├── dr_gateways

│       ├── dr_groups

│       ├── dr_partitions

│       ├── dr_rules

│       ├── emergency_report

│       ├── emergency_routing

│       ├── emergency_service_provider

│       ├── fraud_detection

│       ├── freeswitch

│       ├── freeswitch_scripting

│       ├── globalblacklist

│       ├── grp

│       ├── imc_members

│       ├── imc_rooms

│       ├── load_balancer

│       ├── location

│       ├── missed_calls

│       ├── presentity

│       ├── pua

│       ├── registrant

│       ├── re_grp

│       ├── rls_presentity

│       ├── rls_watchers

│       ├── route_tree

│       ├── rtpengine

│       ├── rtpproxy_sockets

│       ├── silo

│       ├── sip_trace

│       ├── speed_dial

│       ├── subscriber

│       ├── tls_mgm

│       ├── uri

│       ├── userblacklist

│       ├── usr_preferences

│       ├── version

│       ├── watchers

│       └── xcap

├── menuconfig_templates

│   ├── opensips_loadbalancer_def.m4

│   ├── opensips_loadbalancer.m4

│   ├── opensips_residential_def.m4

│   ├── opensips_residential.m4

│   ├── opensips_trunking_def.m4

│   └── opensips_trunking.m4

└── mysql

├── acc-create.sql

├── alias_db-create.sql

├── auth_db-create.sql

├── avpops-create.sql

├── b2b-create.sql

├── b2b_sca-create.sql

├── cachedb_sql-create.sql

├── call_center-create.sql

├── carrierroute-create.sql

├── closeddial-create.sql

├── clusterer-create.sql

├── cpl-create.sql

├── dialog-create.sql

├── dialplan-create.sql

├── dispatcher-create.sql

├── domain-create.sql

├── domainpolicy-create.sql

├── drouting-create.sql

├── emergency-create.sql

├── fraud_detection-create.sql

├── freeswitch_scripting-create.sql

├── group-create.sql

├── imc-create.sql

├── load_balancer-create.sql

├── msilo-create.sql

├── permissions-create.sql

├── presence-create.sql

├── registrant-create.sql

├── rls-create.sql

├── rtpengine-create.sql

├── rtpproxy-create.sql

├── siptrace-create.sql

├── speeddial-create.sql

├── standard-create.sql

├── tls_mgm-create.sql

├── uri_db-create.sql

├── userblacklist-create.sql

└── usrloc-create.sql

创建数据库

注意事项：该操作需要保证对应数据库没有创建过

cd  /usr/local/opensips/etc/opensips/

vi  opensipsctlrc

DBENGINE=MYSQL

DBPORT=3306

DBHOST=192.168.0.110

DBNAME=opensips

DBRWUSER=root

DBRWPW="opensips"

DBROOTUSER="root"

执行命令

/usr/local/opensips/sbin/opensipsdbctl  create

防火墙

CENTOS6

iptables  -I  INPUT  1  –p  udp  –dport  5060  –j  ACCEPT

iptables  -I  INPUT  1  –p  tcp  –dport  7443  –j  ACCEPT

service  iptables  save

CENTOS7

firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" port port="5060" protocol="udp" accept'

firewall-cmd --permanent --zone=public --add-rich-rule='rule family="ipv4" port port="7443" protocol="tcp" accept'

firewall-cmd --reload

配置日志

修改 /usr/local/opensips/etc/opensips/opensips.cfg

log_facility=LOG_LOCAL0

修改 /etc/rsyslog.conf

local0.*  -/var/log/opensips/opensips.log

新增 /etc/logrotate.d/opensips

/var/log/opensips/opensips.log {

copytruncate

noolddir

size 20M

rotate 64

dateext

dateformat .%Y%m%d.%s

sharedscripts

postrotate

/bin/kill -HUP `cat /var/run/syslogd.pid 2>/dev/null` 2>/dev/null || true

endscript

}

设置定时任务

sudo crontab -e

* * * * *  /usr/sbin/logrotate   /etc/logrotate.d/opensips

重启rsyslog服务

service rsyslog restart

TCP最大连接数限制

用户级别

查看linux系统用户最大打开文件限制

ulimit -n

修改limits.conf

vi /etc/security/limits.conf

* soft nofile 100000

* hard nofile 100000

linux系统级别

查看linux系统对同时打开文件数的硬限制

sysctl -a|grep file-max

修改sysctl.conf

vi /etc/sysctl.conf

fs.file-max = 100000

使sysctl配置立即生效：

sysctl -p

网络端口限制修改，服务器需要作为client时配置

查看linux系统最大追踪TCP连接数量

sysctl -a | grep ipv4.ip_conntrack_max

查看linux系统端口范围

sysctl -a | grep ipv4.ip_local_port_range

修改sysctl.conf

vi /etc/sysctl.conf

net.ipv4.ip_local_port_range = 10240    65535

net.netfilter.nf_conntrack_max = 100000

使sysctl配置立即生效：

sysctl -p

Linux下查看tcp连接数及状态命令：

netstat -n | awk '/^tcp/ {++S[$NF]} END {for(a in S) print a, S[a]}'

统计7443端口连接数

netstat -nat|grep -i "7443"|wc -l

统计已连接上的，状态为established

netstat -na|grep ESTABLISHED|wc -l

查出哪个IP地址连接最多，异常情况需要封IP

netstat -na|grep ESTABLISHED|awk '{print $5}'|awk -F: '{print $1}'|sort|uniq -c|sort -r

netstat -na|grep SYN|awk '{print $5}'|awk -F: '{print $1}'|sort|uniq -c|sort -r

启动脚本

cd  opensips-2.4.9/packaging/redhat_fedora

cp opensips.init /etc/init.d/opensips

chmod 777 /etc/init.d/opensips

sed -i "s/\/usr\/sbin/\/usr\/local\/opensips\/sbin/g" /etc/init.d/opensips

sed -i "s/\/etc\/\$prog/\/usr\/local\/opensips\/etc\/\$prog/g" /etc/init.d/opensips

开机自动启动

useradd -d /usr/local/opensips -s /sbin/nologin opensips

chkconfig --add opensips

chkconfig opensips on

启停命令

启动：

service opensips start

或者

/usr/local/opensips/sbin/opensipsctl  start

后台启动方式，如果启动失败，需要查看log文件

停止：

service opensips stop

或者

/usr/local/opensips/sbin/opensipsctl  stop

常用命令

/usr/local/opensips/sbin/opensips  -C          //检查配置文件是否有错误

/usr/local/opensips/sbin/opensipsctl monitor          //opensips运行参数监控

/usr/local/opensips/sbin/opensipsctl ping <uri>      //使用OPTION 检测uri

/usr/local/opensips/sbin/opensipsctl dispatcher show    //dispatcher模块信息展示

配置文件

当前文档主要描述，opensips作为注册服务器的信令代理和负载节点的配置方法。

/usr/local/opensips/etc/opensips/opensips.cfg

#

# OpenSIPS residential configuration script

#     by OpenSIPS Solutions <team@opensips-solutions.com>

#

# This script was generated via "make menuconfig", from

#   the "Residential" scenario.

# You can enable / disable more features / functionalities by

#   re-generating the scenario with different options.#

#

# Please refer to the Core CookBook at:

#      https://opensips.org/Resources/DocsCookbooks

# for a explanation of possible statements, functions and parameters.

#

####### Global Parameters #########

log_level=3

log_stderror=no

log_facility=LOG_LOCAL0

children=4

/* uncomment the following lines to enable debugging */

#debug_mode=yes

/* uncomment the next line to enable the auto temporary blacklisting of

not available destinations (default disabled) */

#disable_dns_blacklist=no

/* uncomment the next line to enable IPv6 lookup after IPv4 dns

lookup failures (default disabled) */

#dns_try_ipv6=yes

/* comment the next line to enable the auto discovery of local aliases

based on reverse DNS on IPs */

auto_aliases=no

listen=udp:192.168.0.202:5080   # CUSTOMIZE ME

listen=udp:192.168.0.202:5060

#listen = wss:192.168.0.202:7443 use_children 5

tcp_max_connections=4096

user_agent_header="REG-PXY001"

####### Modules Section ########

#set module path

mpath="/usr/local/opensips/lib64/opensips/modules/"

loadmodule "db_mysql.so"

#### SIGNALING module

loadmodule "signaling.so"

#### StateLess module

loadmodule "sl.so"

#### Transaction Module

loadmodule "tm.so"

modparam("tm", "fr_timer", 2)

modparam("tm", "fr_timeout", 5)

modparam("tm", "fr_inv_timeout", 30)

modparam("tm", "restart_fr_on_each_reply", 0)

modparam("tm", "onreply_avp_mode", 1)

#### Record Route Module

loadmodule "rr.so"

/* do not append from tag to the RR (no need for this script) */

modparam("rr", "enable_double_rr", 1)

modparam("rr", "append_fromtag", 1)

loadmodule "dialog.so"

modparam("dialog", "db_url", "mysql://root:123456@localhost/opensips")

#### MAX ForWarD module

loadmodule "maxfwd.so"

loadmodule "textops.so"

#### SIP MSG OPerationS module

loadmodule "sipmsgops.so"

#### FIFO Management Interface

loadmodule "mi_fifo.so"

modparam("mi_fifo", "fifo_name", "/tmp/opensips_fifo")

modparam("mi_fifo", "fifo_mode", 0666)

#### URI module

loadmodule "uri.so"

modparam("uri", "use_uri_table", 0)

#### USeR LOCation module

loadmodule "usrloc.so"

modparam("usrloc", "nat_bflag", "NAT")

modparam("usrloc", "working_mode_preset", "single-instance-no-db")

#### REGISTRAR module

loadmodule "registrar.so"

modparam("registrar", "tcp_persistent_flag", "TCP_PERSISTENT")

/* uncomment the next line not to allow more than 10 contacts per AOR */

#modparam("registrar", "max_contacts", 10)

#### ACCounting module

loadmodule "acc.so"

/* what special events should be accounted ? */

modparam("acc", "early_media", 0)

modparam("acc", "report_cancels", 0)

/* by default we do not adjust the direct of the sequential requests.

if you enable this parameter, be sure to enable "append_fromtag"

in "rr" module */

modparam("acc", "detect_direction", 0)

loadmodule "proto_udp.so"

loadmodule "dispatcher.so"

modparam("dispatcher", "db_url", "mysql://root:123456@localhost/opensips")

modparam("dispatcher", "ds_ping_method", "OPTIONS")

modparam("dispatcher", "ds_ping_interval", 60)

modparam("dispatcher", "ds_probing_threshhold", 2)

modparam("dispatcher", "ds_probing_mode", 1)

loadmodule "load_balancer.so"

modparam("load_balancer", "db_url", "mysql://root:123456@localhost/opensips")

modparam("load_balancer", "probing_method", "OPTIONS")

modparam("load_balancer", "probing_interval", 60)

####### Routing Logic ########

# main request routing logic

route{

script_trace( 1, "$rm from $si, ruri=$ru", "me");

if (!mf_process_maxfwd_header("10")) {

sl_send_reply("483","Too Many Hops");

exit;

}

if (!has_totag()) {

# initial request

record_route();

}

else {

# sequential request - obey the indicated route

loose_route();

t_relay();

exit;

}

# handle cancel and re-transmissions

# from now on we have only the initial requests

# select the node that'll handle the call (load balanced)

# the method used is different for invite/register requests

# unknown methods are rejected here

if ( is_method("CANCEL") ) {

if ( t_check_trans() )

t_relay();

exit;

}

else if(is_method("OPTIONS")) {

# send reply for each options request

sl_send_reply("200", "ok");

exit;

}

else if (is_method("INVITE")) {

xlog("L_INFO", "INFO: this sip message is an invite\n");

if (!ds_select_dst("1", "1")) {

send_reply("503","Service Unavailable");

exit;

}

}

else if (is_method("REGISTER")) {

xlog("L_INFO", "INFO: this sip message is a register\n");

if (!ds_select_dst("1", "1")) {

send_reply("503","Service Unavailable");

exit;

}

}

else {

send_reply("405","Method Not Allowed");

exit;

}

# route the request

if (!t_relay()) {

sl_reply_error();

}

}

增加网关数据

/usr/local/opensips/sbin/opensipsctl dispatcher addgw 1 sip:192.168.0.146:5060 '' 0 50 'fs1' 'reg001'

/usr/local/opensips/sbin/opensipsctl dispatcher addgw 1 sip:192.168.0.150:5060 '' 0 50 'fs2' 'reg002'

sip软终端配置

加载测试

通过sip软终端注册，发起呼叫，测试信令和媒体的连通性。

总结

opensips作为负载均衡的代理网关，性能非常好。

网关常见的功能，我们通过opensips.cfg配置文件的路由脚本基本很容易实现，具体请关注opensips的子模块介绍和接口。

---

空空如常

求真得真